Securing Financial Data in the Cloud: Tenable がお手伝いできること
November 4, 2024
サイバーセキュリティニュース: CSA が、重要インフラの OT/ICS にゼロ トラストを適用するようアドバイス、ファイブアイズがテクノロジー スタートアップのセキュリティに注目
November 1, 2024Should critical infrastructure orgs boost OT/ICS systems’ security with zero trust? Absolutely, the CSA says. Meanwhile, the Five Eyes countries offer cyber advice to tech startups. Plus, a survey finds “shadow AI” weakening data governance. And get the latest on MFA methods, CISO trends and Uncle Sam’s AI strategy.
2024 年度州および地方政府のサイバーセキュリティ助成金プログラムに CISAの既知の悪用された脆弱性（KEV）がパフォーマンス評価基準として追加
2024/10/31The CISA Known Exploited Vulnerabilities (KEV) catalog and enhanced logging guidelines are among the new measurement tools added for the 2024 State and Local Cybersecurity Grant Program.
サイバーセキュリティニュース: 新しいガイドがシャドー AI の防止と安全なソフトウェアアップデートの導入に関するベストプラクティスを紹介
2024/10/25Looking for help with shadow AI? Want to boost your software updates’ safety? New publications offer valuable tips. Plus, learn why GenAI and data security have become top drivers of cyber strategies. And get the latest on the top “no-nos” for software security; the EU’s new cyber law; and CISOs’ communications with boards.
クラウド環境を保護し、データ侵害を阻止する
2024/10/24As organizations create and store more data in the cloud, security teams must ensure the data is protected from cyberthreats. Learn more about what causes data breaches and about the best practices you can adopt to secure data stored in the cloud.
CVE-2024-47575: FortiManager および FortiManager Cloud における FortiJump ゼロデイ脆弱性に関するよくある質問
2024/10/23Frequently asked questions about a zero-day vulnerability in Fortinet’s FortiManager that has reportedly been exploited in the wild.
MITRE CVE プログラム 25 周年: Tenable セキュリティ レスポンス チームが重要な 25 件の脆弱性を厳選
October 22, 2024Twenty five years after the launch of CVE, the Tenable Security Response Team has handpicked 25 vulnerabilities that stand out for their significance.
CVE-2024-8260: OPA の SMB 強制認証の脆弱性により資格情報が漏洩するリスクがある
October 22, 2024Tenable Research discovered an SMB force-authentication vulnerability in Open Policy Agent (OPA) that is now fixed in the latest release of OPA. The vulnerability could have allowed an attacker to leak the NTLM credentials of the OPA server's local user account to a remote server, potentially allowing the attacker to relay the authentication or crack the password. The vulnerability affected both the OPA CLI (Community and Enterprise editions) and the OPA Go SDK.
サイバーセキュリティニュース: Tenable レポートが有害なクラウド エクスポージャーについて警告、PwC の調査ではサイバー レジリエンス強化のために経営幹部の協力が必要
October 18, 2024Check out invaluable cloud security insights and recommendations from the “Tenable Cloud Risk Report 2024.” Plus, a PwC study says increased collaboration between CISOs and fellow CxOs boosts cyber resilience. Meanwhile, a report finds the top cyber skills gaps are in cloud security and AI. And get the latest on SBOMs; CIS Benchmarks; and cyber pros’ stress triggers.
ハイブリッド型攻撃経路からのサイバー攻撃による被害は約 10 億ドル。阻止するには、実行可能な攻撃経路をマッピングして遮断する
2024/10/16Conventional wisdom suggests best-of-breed is the only way to secure your clouds. But what of hybrid attack paths that cross security domains — like those exploited in the SolarWinds and Capital One breaches? Exposing the gaps attackers exploit to move laterally requires visibility and context across security silos.
Oracle 2024 年 10 月のクリティカルパッチアップデートで 198 件の CVE に対処
2024/10/15Oracle addresses 198 CVEs in its fourth quarterly update of 2024 with 334 patches, including 35 critical updates.
クラウドデータと AI リソースの保護が決め手になるクラウドセキュリティ態勢の要塞化
2024/10/15データセキュリティ態勢管理 (DSPM) と AI セキュリティ態勢管理 (AI-SPM) が、クラウドセキュリティの主要な課題への対処にどのように役立つかをご紹介します。
サイバーセキュリティニュース: AI を活用してサイバーセキュリティ対策強化
2024/10/11More security teams are incorporating AI to uplevel their defense strategies and boost productivity. With so much AI buzz, it may be overwhelming to decipher which tools to acquire and how they fit in a modern security strategy. Read on to explore how AI-enabled tools can help enhance your security program in this special edition of the Tenable Cybersecurity Snapshot!
